The main purpose of Cisco IOS Security is for our data center. It connects each node and user to the network.
Senior Presale Agent
Beneficial posturing, scales well, and helpful support
Pros and Cons
- "The most valuable feature of Cisco IOS Security is posturing."
- "Cisco IOS Security could improve by having more compatibility with other Cisco solutions."
What is our primary use case?
What is most valuable?
The most valuable feature of Cisco IOS Security is posturing.
What needs improvement?
Cisco IOS Security could improve by having more compatibility with other Cisco solutions.
For how long have I used the solution?
I have been using Cisco IOS Security for approximately three years.
Buyer's Guide
Cisco IOS Security
June 2025

Learn what your peers think about Cisco IOS Security. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
856,873 professionals have used our research since 2012.
What do I think about the stability of the solution?
Cisco IOS Security is a stable solution.
What do I think about the scalability of the solution?
The scalability of Cisco IOS Security is good. I can increase and decrease elements when needed.
We have approximately 45,000 people that can use the solution. Additionally, We have approximately 1,000 IT managers, technicians, and other users who directly use this solution.
How are customer service and support?
The support from Cisco IOS Security was very helpful.
I rate the support from Cisco IOS Security a four out of ten.
Which solution did I use previously and why did I switch?
I previously used another similar solution.
How was the initial setup?
I can do all the implementation of the solutions through the Cisco DNA Center. I can manage the Cisco IOS Security configuration. The whole process can be complex. Additionally, when we cannot connect to the internet we need to do manual configuration.
The full setup can take a couple of hours. However, initially, it took to use a couple of weeks.
What about the implementation team?
We did the implementation of Cisco IOS Security in-house.
We have two service engineers that are involved in the deployment and maintenance of the solution. They have the appropriate training needed to support the solution.
What other advice do I have?
I rate Cisco IOS Security an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner

Managing Director at a computer software company with 51-200 employees
A mature product with good integration capabilities, however, it needs to be more affordable
Pros and Cons
- "Cisco has always been a premium product. There's a lot of other entry-level solutions. This is more robust."
- "The company needs to make its solution more affordable to make it more accessible to larger markets. Otherwise, it's seen as an enterprise-level solution that small or medium-sized organizations can't afford and therefore they won't even look at it."
What is most valuable?
The product is quite mature. Cisco is well known within the industry.
The solution's most valuable aspect is that it is extremely integrated. The product basically comes with the firewall features including IPS, URL filtering, malware, et cetera. The integrated features are great.
The functionalities of the product are pretty good.
Cisco has always been a premium product. There's a lot of other entry-level solutions. This is more robust.
The solution offers a good mix of features. You can always add more modules as you need to if you need even more features.
What needs improvement?
The pricing of the solution can be improved. It's not cheap. It's quite expensive.
The company needs to make its solution more affordable to make it more accessible to larger markets. Otherwise, it's seen as an enterprise-level solution that small or medium-sized organizations can't afford and therefore they won't even look at it.
For how long have I used the solution?
I've been using the solution for quite a long time. It's been ten or 15 years. I have well over a decade of experience under my belt.
What do I think about the stability of the solution?
The solution is stable. We find Cisco to be very reliable. It doesn't crash or freeze. There aren't bugs or glitches that disrupt its performance. It's good. There's never been an issue.
What do I think about the scalability of the solution?
The solution can scale. It's designed more as an enterprise-level solution, so it's good for larger companies.
How are customer service and technical support?
The customer support is great. We're quite satisfied with the level of service Cisco provides. They're knowledgeable and responsive.
Overall, we find that they have the best technical support in the business. Their support is quite competent in terms of their technical skills, more so than other competitors. If you face any issues, you can call them at any time and get the answers you need to resolve whatever is going on.
Which solution did I use previously and why did I switch?
I've used a variety of other solutions. I've used Check Point, Palo Alto, and Juniper as well.
We primarily like Cisco due to the fact that their technical support is great. By far, it's the best I've ever seen.
How was the initial setup?
The solution's initial setup is very straightforward. It's not complex at all.
What's my experience with pricing, setup cost, and licensing?
The solution's costs are quite high. It's a turn-off in terms of actually using it. It's more of an enterprise-level solution. It's not ideal for smaller organizations as the cost to run it would be out of their budgeting capabilities.
What other advice do I have?
We use a few different Cisco solutions.
We're a Cisco partner. We have a business relationship with the company.
We're dealing with the latest version of this particular solution.
I'd rate the solution seven out of ten.
The value for money it should be there. Which means good features, good functioning things are there, but they need to make it more affordable for big market. If they were able to price the solution to make it more affordable for more clients that may not be enterprise-level, they've have a bigger footprint.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Buyer's Guide
Cisco IOS Security
June 2025

Learn what your peers think about Cisco IOS Security. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
856,873 professionals have used our research since 2012.
Senior Sales Engineer at Ingram Micro
A stable and scalable firewall solution
Pros and Cons
- "We use the product for firewalls."
- "We cannot directly upgrade the system. The tool's deployment is also very difficult in legacy environments. The tool needs to have bigger ports as well."
What is our primary use case?
We use the product for firewalls.
What needs improvement?
We cannot directly upgrade the system. The tool's deployment is also very difficult in legacy environments. The tool needs to have bigger ports as well.
For how long have I used the solution?
I have been working with the product for four years.
What do I think about the stability of the solution?
The product is stable.
What do I think about the scalability of the solution?
The tool is scalable.
How was the initial setup?
The tool's deployment takes around thirty minutes to complete.
What's my experience with pricing, setup cost, and licensing?
The tool could be priced lower. If you want advanced services, then you need to purchase them.
What other advice do I have?
Most of our customers are from the banking and financial domain. I have chosen the product after a thorough comparison and reading through whitepapers.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Director at Cros Elements LLC
Powerful, easy to set up, and nice interface
Pros and Cons
- "The security is very good."
- "Sometimes I find it difficult to manage. Some configurations are difficult for new engineers, for example."
What is our primary use case?
We're using it for internet traffic security. It's for protection.
What is most valuable?
We don't have a problem with the user interface and it is pretty user-friendly.
We don't mind the cost.
The security is very good.
Cisco is very good, very powerful.
It's a reliable, stable product in general. It's better than the competition.
The product is easy to set up.
It is a stable product.
We find the product to be scalable.
What needs improvement?
How to improve the solution depends on the usage.
Sometimes I find it difficult to manage. Some configurations are difficult for new engineers, for example.
It could be more flexible.
For how long have I used the solution?
I've been using the solution for the last ten years.
What do I think about the stability of the solution?
This is a very stable, reliable product. There are no bugs or glitches. It doesn't crash or freeze.
What do I think about the scalability of the solution?
It's a scalable product.
We have 500 to 600 people using the solution.
How are customer service and support?
Before, it was very easy to get in touch with support. However, it's become more difficult. It can take a long time to get an answer. We also have to deal with time differences, which can make it harder to get an answer.
How was the initial setup?
It is very easy for me to implement the solution. It's very good, it's very easy. There are command planning and equations. Cisco is very simple. We don't have issue with Cisco.
The deployment depends on the product you use and the network design.
You can do it in small batches. It can take some time to refresh. It might take one or two days.
What's my experience with pricing, setup cost, and licensing?
The cost may be around $5,000 to $10,000 a year. If you want support you have to pay at least this price.
What other advice do I have?
We are a Cisco customer and end-user.
We've been using the mid-range version since 2012.
I'd rate the solution around eight out of ten.
Cisco is great. It's likely number one in the world. I'd recommend the solution as it is a very powerful product. However, it's best to have Cisco experts on staff or available to you to make things easier.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT proffesional at Ambo university
A leading security solution that integrates easily with other Cisco products
Pros and Cons
- "Cisco products are very secure and integrate easily with other devices."
- "The graphical user interface or the GUI could be better. Beginners can use some devices with the GUI, but some security devices are configured using CLI. It would also be better if it had its own Intrusion Protection Service and Intrusion Detection Service on the server."
What is our primary use case?
We use Cisco IOS Security for integration purposes. We have Cisco features and Cisco devices in our organization. We use it as an integration system for Cisco devices.
What is most valuable?
Cisco products are very secure and integrate easily with other devices.
What needs improvement?
The graphical user interface or the GUI could be better. Beginners can use some devices with the GUI, but some security devices are configured using CLI. It would also be better if it had its own Intrusion Protection Service and Intrusion Detection Service on the server.
For how long have I used the solution?
I have been using Cisco IOS Security for more than three years.
What do I think about the stability of the solution?
Cisco IOS Security has been stable so far.
What do I think about the scalability of the solution?
The device is not scalable because the device was manufactured with a specific product specification. To scale, you have to plan and add more devices. We have about 12,000 users.
How are customer service and support?
They are supportive and have the technical skills to support us. If I have challenges with a Cisco product, they help me based on their subscription fee.
On a scale from one to five, I would give Cisco technical support a five.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup is straightforward for IT users. It takes about one hour to implement this solution because we have to upgrade the framework on some of the devices.
On a scale from one to five, I would give the initial setup a five.
What's my experience with pricing, setup cost, and licensing?
Cisco IOS Security is not very expensive, and pricing depends on where you live. It's affordable for both individuals and institutions.
On a scale from one to five, I would give Cisco's pricing a four.
What other advice do I have?
We chose Cisco because the company has an excellent market rating, users are familiar with Cisco, and they can deploy Cisco products. Using Cisco also improves the security mechanism of all devices from end to end.
On a scale from one to ten, I would give Cisco IOS Security an eight.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Vice President - Network and Infrastructure at NJA LLC
It covers everything but is especially effective when a lot of the traffic is in layer 7
Pros and Cons
- "We are able to filter a lot of traffic especially when a lot of the traffic is in layer 7."
- "It covers everything we need it to without looking to secondary solutions."
- "The user interface needs to be improved."
- "Signatures and other critical definitions need to be updated more frequently."
What is our primary use case?
Our primary use is just as a firewall. That is pretty much it.
How has it helped my organization?
We are able to filter a lot of traffic. The is especially effective when a lot of the traffic is in layer 7 — the internet aspect of security for application services.
What is most valuable?
I think the multi-layered approach is valuable. Just the fact that it covers everything on the LSA (Local Security Authority) right up to layer 7, in-depth packet analysis, and all that. It covers everything we need it to without looking to secondary solutions.
What needs improvement?
I think the user interface for IOS Security needs to be improved.
I think the signature updates and all the other critical definitions need to be updated more frequently.
For how long have I used the solution?
We have only been using IOS (Internetwork Operating System) Security since about 2016. So we have worked with it for about four years.
What do I think about the stability of the solution?
The stability of the product is okay. There were not really any bugs or glitches that I can remember.
What do I think about the scalability of the solution?
The scalability aspect of it is that it is one of those products where you have to incorporate additional hardware. It is a vertical scale, so you add on the boxes you need and bond them together. Of course, it costs more to scale that way than something that would be a software upgrade. You have got to pay to scale and to get more features.
Our clients are generally small to medium-sized businesses. Cisco IOS is a pretty good fit for that range of clients.
How are customer service and technical support?
I have used the Cisco technical support and they were okay. Rating them out of ten, I would give them an eight or nine-out-of-ten. They have a pretty good system with decent response time and accuracy. They are good overall and in comparison to other services. They offer 24/7 service, which is a benefit.
Which solution did I use previously and why did I switch?
I was actually using Cisco products more in the past and use them as a consultant. Right now, Sophos is the only one I have been using. It just came about through one of those situations where we were able to partner up with Sophos. That is really the reason for the change.
How was the initial setup?
Setup and installation are pretty much straightforward. Comparing the installation to Fortinet or Sophos they are all the same.
What's my experience with pricing, setup cost, and licensing?
The pricing for IOS Security is okay. It is competitive. It costs more when you have got the need to pay for more features. You have to buy more boxes and tie them together to upgrade to the next level.
Which other solutions did I evaluate?
I have used Fortinet in the past too as well as Sophos and other Cisco products. They are all similar and if you know how to use them they are virtually all the same.
What other advice do I have?
The advice that I would give to others looking into implementing this product is that I think they need to do their benchmarking. They should do due diligence beforehand in terms of their traffic.
On a scale from one to ten (where one is the worst and ten is the best), I would rate this product overall as about an eight-out-of-ten. I do not know how they could realistically improve on that much. You never keep up with the hackers, they are always a step ahead of us when it comes to security.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Network Architect at Syriatel Mobile Telecom
Secure, cost effective, and easy to install
Pros and Cons
- "It is less expensive than alternative firewalls."
- "While Cisco IOS Security is stable and scalable, I would like to see it improved to be even better."
What is our primary use case?
We can use iOS security for a variety of security features. We can use it to run DPM. We run encrypted data and can use it for zone-based firewalls, to a zone-based firewall.
I use VPN solutions such as site-to-site or user-site VPN, and some do not require a firewall.
What is most valuable?
It is less expensive than alternative firewalls.
What needs improvement?
While Cisco IOS Security is stable and scalable, I would like to see it improved to be even better.
For how long have I used the solution?
I have been working with Cisco IOS Security for three months.
I use version 12.4 and I use 15 and above for the router.
What do I think about the stability of the solution?
Cisco IOS Security is very stable.
What do I think about the scalability of the solution?
Cisco IOS Security is a scalable solution.
We have approximately 50 users.
How are customer service and support?
We have not contacted technical support.
I don't have any critical issues, and I haven't had any open technical tickets with support. Everything is fine, but I work in security with multi-media solutions. We haven't had any problems.
How was the initial setup?
The installation is straightforward. It's easy, we didn't have any problems with the installation of Cisco IOS Security.
I have three or four technical teams to help me work on publishing.
What's my experience with pricing, setup cost, and licensing?
Cisco IOS Security requires a license.
With Cisco, we have a variety of licenses. They have smart licenses that can be provided for one year, two years, three years, five years, and seven years. Alternatively, they have perpetual licenses available. I am working with a perpetual license, but not a smart license.
What other advice do I have?
Before we can use any security feature on the Cisco router, we must first purchase an iOS security license.
Yes, I would recommend this solution. It is more stable and less expensive than other firewalls. In some cases, it saves money for the project or the companies that work with it.
I would rate Cisco IOS Security an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sr. Security and Enterprise Architect at a security firm with 11-50 employees
Great security and automation with helpful technical assistance
Pros and Cons
- "Cisco Technical Assistance Center works on a follow-the-sun concept and gives real 24x7 customer support, which is a great advantage when you have a service contract with them."
- "There are the usual bugs that are inherent to some software upgrades. Sometimes this provides some unexpected issues, however, it happens with all brands all the time."
What is our primary use case?
The solution is used for enterprise and NAC connectivity.
This kind of technology has the advantage of being very flexible to any size organization. It is a cornerstone as a part of the basic network infrastructure.
It can be used as a simple switch to connect your network devices with security features embedded - such as port security, for example. This allows companies to limit to a fixed address per port, avoiding external or malicious assets for accessing the network.
For example, if you have a retail business, and you have a lot of small stores spread nationwide, you just need to connect some cameras and sales points to the network. iOS security solutions allow you to have a secure LAN and you could add a secure WAN connection through your Internet provider with LTE links as backups. You can set up on-demand VPN connections from store to store for voice/video calls, or do inventory queries direct to the HQ database.
How has it helped my organization?
As a Cisco partner/reseller, security has been a concern for many years. Cisco has a security concept that begins right when you try to connect to the network. Security is a complete system and is not just put on security devices at the perimeter or between tiers inside a data center.
iOS on routers is a mature solution, allowing easy setup of a traditional ISAKMP V1 or V2 VPN, and a very mature proprietary VPN flavor called DMVPN. DMVPN allows on-demand VPN establishment with minimal setup configuration and creates a pseudo full mesh avoiding bottlenecks.
Cisco Technical Assistance Center works on a follow-the-sun concept and gives real 24x7 customer support, which is a great advantage when you have a service contract with them.
What is most valuable?
The best features include the Auto Secure script, port security, spanning-tree root and loop guard, 802.1x, DMVPN, GET VPN, SD-Access, and Secure SD-WAN.
The software offers plenty of security solutions that can work in the most sophisticated enterprise but also works well for small/mid-range enterprises.
A simple switch is able to run basic security as port security, limiting the MAC addresses allowed on a port, or by running a script you can set up ACL and some control plane policies to protect control and management planes and basic DoS protection.
The same software is able to work with sophisticated security options going from the basic 802.1x to MACSEC, NAC, and trustsec, and can be integrated with automation tools in order to do auto onboarding tasks (for wired devices), profiling, and more interesting security tasks.
It allows for easy traditional ISAKMP V1 or V2 VPN setups and has a very mature proprietary VPN flavor called DMVPN. DMVPN allows on-demand VPN establishment with minimal setup configuration involved and creates a pseudo full mesh (avoiding bottlenecks as a hub-spoke topology does). Dynamic VPN establishment allows spoke-to-spoke traffic flow on-demand, optimizing VoIP/SIP calls setting up direct tunnels among spokes, reducing latency compared with a hub/spoke topology.
Switch and router iOS can be automated and orchestrated with secure SD-WAN and SD-Access Cisco solutions. Having the iOS software is relevant for small and large enterprises; it works fine for all size networks.
What needs improvement?
There are the usual bugs that are inherent to some software upgrades. Sometimes this provides some unexpected issues, however, it happens with all brands all the time.
Some additional features could be improved. For example, the licensing for DNA environments could be better. In some countries, the end-user does not want to go to orchestration/automation environments. They just want to have a small network for their small budget and they never will go to these environments. They consider it unfair that they have to pay for a license/subscription that will never be used.
For how long have I used the solution?
I've used the solution for ten or more years.
What do I think about the stability of the solution?
It is very stable.
What do I think about the scalability of the solution?
The product is very scalable.
How are customer service and support?
Technical support is great.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
My customers have used other brands that just gave connectivity and did not offer security over LAN switches. The VPN scheme was limited to site-to-site over hub-and-spoke topologies.
How was the initial setup?
The initial setup is straightforward.
What about the implementation team?
We are the vendor team that handles implementations.
What's my experience with pricing, setup cost, and licensing?
Cisco is not a cost-effective brand, however, in the end, you get what you pay for. Regarding licensing, some customers will not use automation/orchestration environments and do not like to pay a subscription for something they will never use.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: I have 20+ years of experience working on cisco partners, but I do have Cisco Infrastruchture on my own company and the enunciated solutions are currently running as if I were another more customer too.

Buyer's Guide
Download our free Cisco IOS Security Report and get advice and tips from experienced pros
sharing their opinions.
Updated: June 2025
Popular Comparisons
Fortinet FortiGate
Netgate pfSense
OPNsense
Cisco Secure Firewall
Palo Alto Networks NG Firewalls
Juniper SRX Series Firewall
Fortinet FortiGate-VM
KerioControl
Fortinet FortiOS
Palo Alto Networks Advanced Threat Prevention
Check Point IPS
Palo Alto Networks URL Filtering with PAN-DB
Juniper vSRX
Fortra's Tripwire Enterprise
Buyer's Guide
Download our free Cisco IOS Security Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What do you recommend for a corporate firewall implementation?
- Comparison of Barracuda F800, SonicWall 5600 and Fortinet
- Sophos XG 210 vs Fortigate FG 100E
- Which is the best network firewall for a small retailer?
- When evaluating Firewalls, what aspect do you think is the most important to look for?
- Cyberoam or Fortinet?
- Fortinet, Palo Alto or Check Point?
- If you could go back, would you change your decision to buy that firewall and why?
- Sophos XG vs Fortigate UTM
- Can you recommend a solution to replace Cyberoam 200ing Firewall?